CLAIMS 



\l. A method for generating a tamper resistant version of a software 
program\including a stream of data blocks, comprising: 

\ undertaking a predetermined number of iterations of forward plain text 
chaining of the blocks followed by backward plain text chaining of the blocks. 

2. The method of claim 1, further comprising XORing a first block with 
an adjacent block to render a chained block. 

3. The method of KJlaim 2, further comprising scrambling chained blocks 
using a cipher. \ 

4. The method of Claim 3, comprising scrambling a chained block using 
at least one but not all rounds of the cipher to render a scrambled block before 
chaining the chained block to another block. \ 

5. The method of Claim 4, comprising descrambling the chained block 
using only a single round of the cipher to render a result and then XORing the result 
with an adjacent block. \ 

6. A computer program device, comprising: \ 
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\ a computer program storage device including a program of instructions 
usable by an encryption computer, comprising: 

\ logic means for chaining a data block to a plain text version of an 
adjacent block in the stream to render a chained block; 

logic means for scrambling the chained block using a first round of a 
cipher to render a scrambled block; and 

logic mfeans for iterating the means for scrambling and chaining using 
subsequent roundk of the cipher. 

7. The computer program device of Claim 6, wherein the means for 
iterating iterates forward and backward through the stream, using successive rounds 
of the cipher. \ 

8. A computer system for encrypting a stream of data blocks, comprising 
a processor programmed to execute method acts including: 

(a) receiving a sequence of N blocks; 

(b) initializing a previous block variable B; 

(c) for i=l to N, executing a DO loon comprising: 

(c)(1) XORing an ith block with B to render a modified ith 
block; \ 

(c)(2) setting B equal to the modifieo\ith block; 
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(c)(3) scrambling the modified ith block using at least one 
round of a cipher; 

(c) (4) incrementing "i" by unity and returning to act (b)(1); 

(d) initializing a previous block variable B; 

(e) for i=N to 1, executing a DO loop comprising: 
(e)(1) XORing an ith block with B, yielding a modified ith 

block; 

(e)te) setting B to the modified ith block; 
(e)(3/\scrambling the modified ith block using at least one next 
round of a cipher; 

(e) (4) decrementing "i" by unity and returning to act (b)(1); and 

(f) determining whether a predetermined number of iterations 
have been executed, and\f not, returning to act (b) using a next round 
of the cipher, otherwise outputting an encrypted stream of data blocks. 

9. The computer system of Claim 8,\vherein the stream of data blocks is 
established by a computer program. 



1 

2 



10. The computer system of Claim 9, whereii^ a respective round of the 
cipher is used for each iteration. 
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11. A method for generating a tamper resistant version of a software 
program including a stream of data blocks, comprising: 
providing a cipher defining rounds; 

iterating through the rounds of the cipher by iterating through 
respective outer loops of forward plain text chaining followed by backward 
plain text chaining; and 

duldng each forward portion of an outer loop, applying a respective 
round of the^cipher to each block, and during each backward portion of an 
outer loop, applying a respective round of the cipher to each block. 



12. The method of Claim 1 1, further comprising: 

(a) receiving a sequence of N blocks; 

(b) initializing a previous block variable B; 

(c) for i=l to N, executing a DO loop comprising: 

(c)(1) XORing a\ith block with B to render a modified ith 

block; 

(c)(2) setting B equal tdythe modified ith block; 
(c)(3) scrambling the modified ith block using at least one 
round of a cipher; 

(c) (4) incrementing "i" by unity\and returning to act (b)(1); 

(d) initializing a previous block variable B; 

(e) for i=N to 1, executing a DO loop comprising: 
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13 \ (e)(1) XORing an ith block with B, yielding a modified ith 

14 \ block; 

15 \ (e)(2) setting B to the modified ith block; 

16 ^ \ (e)(3) scrambling the modified ith block using at least one next 
^ / I rcmnd of a cipher; 

1 ^ V J \ ( e ^ 4 ) decrementing "i" by unity and returning to act (b)( 1 ); and 

19 \ (f) determining whether a predetermined number of iterations 

20 have been executed, and if not, returning to act (b) using a next round 

21 of the cipher, otherwise outputting an encrypted stream of data blocks. 

IK 13. A method for generating a tamper resistant version of a software 
2fl program including a stream of data blocks, comprising: 

3D scrambling a block using one and only one round of a cipher; then 

chaining the block to aWher block to render a chained block; then 

5 ;= 2 scrambling the chained block using one and only round of the cipher. 

M \ 

'At? \ 

7=*? \ 

jsat \ 

1 14. The method of Claim 13, further comprising: 

2 (a) receiving a sequence of N blocks; 

3 (b) initializing a previous block variable B; 

4 (c) for i=l to N, executing a DO loop comprising: 

5 (c)(1) XORing an ith block with to render a modified ith 

6 block; \ 
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7 \ (c)(2) setting B equal to the modified ith block; 

8 \ (c)(3) scrambling the modified ith block using at least one 

9 f\ round of a cipher; 

10 / M / \ (c)(4) incrementing "i" by unity and returning to act (b)(1); 

K \ 

1 1 \J \ (d) initializing a previous block variable B; 

12 Ye) for i=N to 1, executing a DO loop comprising: 

13 (eVl) XORing an ith block with B, yielding a modified ith 

14 block; \ 

15 (e)(2) Setting B to the modified ith block; 

16^ (e)(3) scrambling the modified ith block using at least one next 

1 75 round of a cipher; \ 

1 8tQ (e)(4) decrementing "i" by unity and returning to act (b)(1); and 

19q (f) determining whether a predetermined number of iterations 

2(>^ have been executed, and ii\not, returning to act (b) using a next round 

21 ; 2j of the cipher, otherwise outputting an encrypted stream of data blocks. 

1 " 1 5. A computer system for decrypting, a stream of data blocks, comprising 

2 a processor programmed to execute method acts including: 

3 (a) receiving a sequence of N bloVks; 

4 (b) for i= N to 1, executing a DO loop comprising: 

5 (b)(1) reverse XORing an i* block with a block^; 
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6 \ (b)(2) unscrambling the block using a round of a cipher to 

7 \ render an unscrambled block; 

8 \ (b)(3) determining whether a block^ exists, and if not, 

9 f^l^\ proceeding to act (c), otherwise; 

10 I A-^ \ (b)(4) decrementing M i" by unity and returning to act (b)(1); 

11 (c) \ for i= 1 to N, executing a DO loop comprising: 

12 \c)(l) reverse XORing an i* block with a block i+I ; 

13 (c)(2) unscrambling the i* block using a single round of a 

14 cipher to render an unscrambled block; 

15^ (c)(3) oetermining whether a blocks exists, and if not, 

16:K proceeding to act (d), otherwise; 

17 J (c)(4) incrementing "i" by unity and returning to act (c)(1); 

1 8p (d) determining whether a predetermined number of iterations have 

19^ been executed, and if not, returning\o act (b) using a next round of the cipher, 

20 j| otherwise outputting a decrypted stream of data blocks. 

1 '~ 16. The computer system of Claim 15, ^herein the stream of data blocks 

2 is established by a computer program. \ 

1 17. The computer system of Claim 16, wherein a. respective round of the 

2 cipher is used for each iteration. \ 
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